Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/24CC89F2357511F0B1E06D34C4F9AE02.roa
File: 24CC89F2357511F0B1E06D34C4F9AE02.roa (raw, json)
Hash identifier: AZleKmPfcDBWP4PlVsezWWzmxDQU7MAo1OfWf6MayRY=
Subject key identifier: DA:21:96:A9:35:8E:21:E3:B6:39:CF:65:0B:55:22:E9:B7:03:51:83
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2701
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/24CC89F2357511F0B1E06D34C4F9AE02.roa
Signing time: Tue 20 May 2025 12:22:49 +0000
ROA not before: Tue 20 May 2025 12:22:49 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 213993
IP address blocks: 115.167.5.0/24 maxlen: 24
115.167.14.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 11:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9985 (0x2701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 20 12:22:49 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=682c7419-2229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:fe:46:7f:32:3a:f2:cf:b4:7e:dc:70:d4:
20:60:89:2a:cb:ba:df:b1:74:1f:20:b5:76:5f:37:
e9:73:db:11:f1:1c:d2:72:19:1c:ef:93:c1:29:9a:
fb:03:3a:7f:49:4d:15:58:57:df:cb:88:91:59:6c:
0d:52:f4:70:9e:a1:9e:be:91:02:69:88:a9:9b:b7:
46:fb:fc:46:8e:a3:e9:f1:9d:ab:16:15:05:ef:73:
63:df:e3:c3:1a:ab:94:0e:96:fd:4d:d7:0e:6d:3b:
30:95:a0:98:6d:21:8f:ba:51:2b:b3:9d:39:a6:46:
b9:b7:e0:73:bb:27:de:34:c1:84:8d:b7:ce:b5:95:
b9:05:82:65:07:9b:e9:bd:67:f0:c7:3a:61:54:9a:
85:24:77:5f:33:d8:59:e0:f7:8c:d3:68:92:b6:ae:
46:c9:28:6f:d2:c9:11:0b:cf:2d:b0:52:81:32:ad:
c8:2d:4d:39:82:a6:70:ed:e3:3e:60:b0:43:ff:aa:
f5:b8:c5:33:0b:57:3d:ac:59:2f:7f:45:ed:66:71:
05:19:a5:80:c3:6a:61:ae:18:1a:8d:e7:13:8e:27:
ee:59:61:a5:dc:31:ee:75:ec:e5:25:e0:12:c9:05:
26:b0:35:95:4c:07:72:45:b0:11:ca:68:5a:12:5b:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:96:A9:35:8E:21:E3:B6:39:CF:65:0B:55:22:E9:B7:03:51:83
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/24CC89F2357511F0B1E06D34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.5.0/24
115.167.14.0/24
115.167.52.0/22
115.167.66.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bd:20:f1:24:58:d1:ea:b0:9c:b3:e3:81:6c:f6:df:f0:33:
d0:e6:52:e9:36:36:19:41:85:49:da:cf:85:05:04:44:65:ee:
44:9a:f8:14:8b:55:6b:b3:39:3d:cc:92:5b:db:21:1a:94:0f:
f4:c2:5f:fb:7a:3c:3a:cd:27:54:32:ef:5f:3f:47:c5:72:ee:
45:5f:02:84:04:f0:88:db:51:cb:9c:c8:2c:72:f8:11:9a:fc:
ca:29:33:ae:c3:74:05:63:e7:80:7e:dc:9a:b5:1f:8d:39:da:
de:77:b6:63:6f:27:72:03:82:2c:9a:1d:00:3d:b1:89:67:a7:
01:9e:70:33:5a:43:0b:86:4b:c2:01:cc:64:a1:f4:6d:16:5b:
30:6c:27:49:9e:69:32:a9:c5:59:fd:57:0c:0a:ad:04:24:8e:
f1:03:3b:87:a8:f0:cf:c9:5c:10:34:0e:b1:28:9c:90:53:7a:
ef:4a:9e:a3:5a:0c:0c:8e:0d:47:fb:24:2f:0c:7d:ee:4c:2a:
9e:8a:cb:ac:9a:3b:70:b8:8a:2d:3b:36:a5:5a:1b:75:bc:52:
a1:56:fe:dd:d1:87:52:a2:27:ca:d6:96:48:6d:56:98:d2:1e:
1f:86:d3:fe:c0:e5:1b:69:e8:8c:02:03:ff:6e:4b:71:c5:fc:
50:37:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:06 2025 by rpki-client